From 9c0dbe1543c25130e4b63409022e17fa069dc388 Mon Sep 17 00:00:00 2001
From: void <1711810+taraxvoid@users.noreply.github.com>
Date: Tue, 6 Oct 2026 09:39:53 -0700
Subject: [PATCH] fix(renovate): drop Renovate security PRs in favor of
 Dependabot security updates

Security PRs now come from GitHub Dependabot security updates (a repo
setting, no config file). Renovate's vulnerabilityAlerts reads the same
GitHub alerts, so leaving it on would open duplicate PRs.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 default.json | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/default.json b/default.json
index 003e4e0..a0dab61 100644
--- a/default.json
+++ b/default.json
@@ -15,9 +15,7 @@
     "schedule": ["before 9am on the first day of the month"]
   },
   "vulnerabilityAlerts": {
-    "minimumReleaseAge": null,
-    "schedule": ["at any time"],
-    "labels": ["security"]
+    "enabled": false
   },
   "packageRules": [
     {